CVE-2025-10604

5.5 mediumEPSS 0.4%

Medium (5.5) in emiloi online discussion forum. EPSS 0.4% chance of exploitation in the next 30 days.

A vulnerability was identified in PHPGurukul Online Discussion Forum 1.0. This affects an unknown part of the file /admin/edit_member.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2025-09-17
Modified: 2026-09-26
Record from: the NVD, synced 2026-10-19

Affected

emiloi:online_discussion_forum

References

https://github.com/maximdevere/cve/issues/2
https://phpgurukul.com/
https://vuldb.com/?ctiid.324624
https://vuldb.com/?id.324624
https://vuldb.com/?submit.649868

Check your stack JSON